$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS212895.roa File: AS212895.roa (raw, json) Hash identifier: yVypVHDQLEZFGpQSolHnwCqcrhVEZOncMO+emCbnBrI= Subject key identifier: EC:6B:34:2D:1F:BE:6F:A4:6E:AC:F4:F2:B6:EC:DB:9D:8E:5D:63:3A Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 67815434660B110231A77D2653C1881FA97C1BA5 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS212895.roa Signing time: Wed 17 Jun 2026 12:52:07 +0000 ROA not before: Wed 17 Jun 2026 12:47:07 +0000 ROA not after: Wed 16 Jun 2027 12:52:07 +0000 asID: 212895 IP address blocks: 2a0b:4e07:200::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 14:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:81:54:34:66:0b:11:02:31:a7:7d:26:53:c1:88:1f:a9:7c:1b:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Jun 17 12:47:07 2026 GMT Not After : Jun 16 12:52:07 2027 GMT Subject: CN=EC6B342D1FBE6FA46EACF4F2B6ECDB9D8E5D633A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e9:18:ab:b8:23:d3:3d:00:b3:38:d9:1e:3b: c4:94:91:b1:34:d4:bf:1e:aa:9d:a2:ec:3d:53:66: d5:a8:33:f3:21:67:95:01:57:45:03:89:7b:b7:98: 6e:5c:3c:92:f2:02:7e:c5:f0:d0:d0:26:a6:c8:6a: 16:28:fd:41:66:31:d1:8f:c0:60:df:0e:1e:b3:ff: f6:eb:03:f1:2c:08:70:4a:57:f7:6c:ac:1a:07:46: fe:eb:00:16:f4:a9:9c:91:c5:ea:cd:5e:49:1a:54: 97:11:e5:88:1d:56:9a:40:51:a8:a1:fa:a6:08:e4: 85:f6:cf:09:cc:a8:66:38:26:18:cf:cf:a7:e9:3e: bc:15:e4:54:01:34:ca:3c:28:dd:01:ce:64:e4:16: 02:d6:8c:ab:e6:e8:43:2c:5e:86:26:b8:ee:cd:b6: 4f:35:68:8d:a2:83:1e:9f:46:fb:8c:f3:73:2f:54: 47:f3:c1:38:59:a2:aa:16:a5:ad:8a:99:08:8d:00: f7:82:c2:fc:76:a6:75:c1:7f:f6:51:b8:f8:fc:8a: ec:ce:31:74:cf:85:09:7a:53:c4:4a:6d:f6:bb:47: b3:46:35:3f:14:e9:60:c6:2f:ed:12:73:73:40:19: a3:0d:64:cd:57:bd:d1:b1:e8:d9:82:ea:09:59:bc: 4b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:6B:34:2D:1F:BE:6F:A4:6E:AC:F4:F2:B6:EC:DB:9D:8E:5D:63:3A X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS212895.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:200::/44 Signature Algorithm: sha256WithRSAEncryption 9c:36:b9:9c:24:d3:91:62:64:96:2d:76:94:5f:a2:2e:df:e1: 9d:02:93:4e:d5:76:f1:34:d9:79:f2:04:b2:0f:65:47:c5:cb: ad:64:49:32:13:8e:54:d5:67:7a:13:82:14:dc:79:8a:98:1c: 81:32:cd:7a:94:39:53:f0:e2:6f:0c:dd:3b:6f:50:cd:fb:fc: a2:eb:b5:fd:f9:34:5c:26:78:68:52:ca:b6:09:ee:c7:05:cb: 1c:bd:d2:74:0c:a8:08:e8:78:49:59:1d:e9:79:7b:15:2b:14: c1:88:b8:d3:9e:91:c9:a0:22:52:fb:6f:28:0a:62:d7:c3:c8: ff:2d:0e:a9:0a:7d:a2:4f:1e:cd:32:40:4e:bd:4f:a2:82:24: cb:48:ed:b5:af:cd:e8:a9:14:eb:26:03:c6:a9:ec:86:6b:36: af:72:4a:c8:4e:05:3a:b8:7c:7d:69:0f:a7:94:bf:38:67:5c: 88:5e:7b:d6:c6:c7:06:07:bf:ff:38:5e:74:88:03:91:b5:29: b3:52:4c:17:97:db:a3:fc:56:3e:78:36:b8:ce:ad:82:db:1d: c0:ee:b3:89:a4:b2:7b:3f:19:37:1e:81:30:f5:c5:1b:0a:d0: 0b:b8:7d:34:0c:56:86:55:62:dd:0a:92:9d:64:a2:d9:6a:61: b1:04:af:af -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUZ4FUNGYLEQIxp30mU8GIH6l8G6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA2MTcxMjQ3MDdaFw0yNzA2MTYxMjUyMDdaMDMxMTAvBgNV BAMTKEVDNkIzNDJEMUZCRTZGQTQ2RUFDRjRGMkI2RUNEQjlEOEU1RDYzM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC46RiruCPTPQCzONkeO8SUkbE0 1L8eqp2i7D1TZtWoM/MhZ5UBV0UDiXu3mG5cPJLyAn7F8NDQJqbIahYo/UFmMdGP wGDfDh6z//brA/EsCHBKV/dsrBoHRv7rABb0qZyRxerNXkkaVJcR5YgdVppAUaih +qYI5IX2zwnMqGY4JhjPz6fpPrwV5FQBNMo8KN0BzmTkFgLWjKvm6EMsXoYmuO7N tk81aI2igx6fRvuM83MvVEfzwThZoqoWpa2KmQiNAPeCwvx2pnXBf/ZRuPj8iuzO MXTPhQl6U8RKbfa7R7NGNT8U6WDGL+0Sc3NAGaMNZM1XvdGx6NmC6glZvEsTAgMB AAGjggItMIICKTAdBgNVHQ4EFgQU7Gs0LR++b6RurPTytuzbnY5dYzowHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUz ZjgyMGY1LzEvQVMyMTI4OTUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQqC04HAgAwDQYJKoZIhvcNAQEL BQADggEBAJw2uZwk05FiZJYtdpRfoi7f4Z0Ck07VdvE02XnyBLIPZUfFy61kSTIT jlTVZ3oTghTceYqYHIEyzXqUOVPw4m8M3TtvUM37/KLrtf35NFwmeGhSyrYJ7scF yxy90nQMqAjoeElZHel5exUrFMGIuNOekcmgIlL7bygKYtfDyP8tDqkKfaJPHs0y QE69T6KCJMtI7bWvzeipFOsmA8ap7IZrNq9ySshOBTq4fH1pD6eUvzhnXIhee9bG xwYHv/84XnSIA5G1KbNSTBeX26P8Vj54NrjOrYLbHcDus4mksns/GTcegTD1xRsK 0Au4fTQMVoZVYt0Kkp1kotlqYbEEr68= -----END CERTIFICATE-----Generated at Tue Jul 21 22:12:14 2026 by rpki-client